EP1364494B1 - Method for adding a new device to a wireless network - Google Patents

Images

Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/06—Authentication
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
  • H04L63/0492—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/12—Detection or prevention of fraud
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W52/00—Power management, e.g. Transmission Power Control [TPC] or power classes
  • H04W52/04—Transmission power control [TPC]
  • H04W52/38—TPC being performed in particular situations
  • H04W52/50—TPC being performed in particular situations at the moment of starting communication in a multiple access environment
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
  • H04L63/104—Grouping of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
  • H04L63/1441—Countermeasures against malicious traffic
  • H04L63/1475—Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W52/00—Power management, e.g. Transmission Power Control [TPC] or power classes
  • H04W52/04—Transmission power control [TPC]
  • H04W52/18—TPC being performed according to specific parameters
  • H04W52/28—TPC being performed according to specific parameters using user profile, e.g. mobile speed, priority or network state, e.g. standby, idle or non-transmission
  • H04W52/283—Power depending on the position of the mobile
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W76/00—Connection management
  • H04W76/10—Connection setup
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W84/00—Network topologies
  • H04W84/18—Self-organising networks, e.g. ad-hoc networks or sensor networks

Definitions

• the present invention relates to wireless communications; and more particularly to wireless network communications.
• Bluetooth Specification The Bluetooth Specification continues to evolve and subsequent versions are expected to be available.
• the Bluetooth Specification enables the creation of small personal area networks (PAN's), where the typical operating range of a device is 100 meters or less.
• PAN personal area networks
• the wireless Bluetooth devices sharing a common channel form a piconet.
• Two or more piconets co-located in the same area, with or without inter-piconet communications, is known as a scatternet. It is anticipated that as piconets are setup there could be several piconets operating in the same area as a scattemet, but not necessarily linked together.
• a wireless Bluetooth device When a wireless Bluetooth device tries to connect to a particular piconet, it must go through an authentication process, where a user that is part of that piconet, allows the guest to join the piconet.
• Typical wireless network devices such as computers, personal digital assistants (PDAs) and mobile phones, have a display and a keyboard that facilitate the authentication process.
• PDAs personal digital assistants
• a user with a mobile phone enters into the operating range of a piconet, he will get a message telling what piconet, with a particular ID, he has just entered and he can signal his intention to join that piconet by pressing the appropriate key on his keypad. When he presses the appropriate key, he will start the process of joining that piconet.
• the headset may be paired to work only with a paired device. This paired device may also have a limited user interface, and not have a display or keypad.
• GB-A-2342010 discloses a method and an apparatus for reducing transmission power to provide secure registration within an in-home wireless network.
• This Method and apparatus for secure registration of an access device 604 with a base station involves the base station reducing its operational power level to a lower registration power level during registration, thus ensuring secure registration for a device brought close to the base station.
• the access device and the base station each have a receiver and a transmitter transmitting at an operational power level. Once registration has been initiated, either by the base station or device, the base station switches its r.f.
• transmitter from a relatively high power operational state, to a relatively low power registration state, transmits a registration signal to the device, receives a response and then restores its power level to the operational state.
• the access device may similarly reduce its operational power level to a registration power level to transmit a registration signal.
• Conventional encryption may be used and transmitter power reduction may be achieved by switching in a load during registration.
• Operation according to the present invention enables wireless devices to select and join a particular wireless network with minimal user interaction and with ease in selection of the network.
• the invention is defined by claims 1 and 6.
• reduced power operations are performed during corresponding authentication operations.
• Reduced power authentication operations ensure that admission to the selected network is attempted and not with a different network. Further, the reduced power operations minimize the ability of eavesdropping devices to intercept authentication information.
• One technique for implementing these reduced power authentication operations is to first select a master device of the wireless network for the purpose of requesting a connection to the wireless network by placing the new device at a reduced distance from the master device of the wireless network. This reduced distance is less than 1 meter.
• the new device then sends a message to the master device that requests that the new device join the wireless network.
• both the new device and the master device have their radio frequency power outputs at reduced power levels sufficient to maintain radio communications between the devices at the reduced distance such that devices outside of 1 meter from the master device or the new device cannot eaves drop upon authentication operations between the master device and the new device.
• the master device then processes the request, approves the request, and authenticates the new device into the wireless network. Once these operations are complete, the new device and the master device increase their the radio frequency power outputs to normal power levels.
• a user of a wireless device having a minimal (or no) user interface may easily select a particular network.
• a minimal (or no) user interface e.g., a wireless headset
• the master device and the new device reducing their transmit power during the joining operations, joining a desired network is substantially guaranteed.
• minimal user input is required for the joining operations.
• the user of the new device may easily select a desired network from a plurality of networks having overlapping coverage area.
• FIG 1 illustrates a network 10 that includes two wireless devices 102-1 and 102-2.
• Network 10 is, for example, a wireless Bluetooth point-to-point piconet where wireless device 102-1 is a master Bluetooth system and wireless device 102-2 is a slave Bluetooth system, where the master 102-1 and slave 102-2 share the same channel.
• the point-to-point network 10 described with reference to Figure 1 need not include Bluetooth devices 102-1, 102-2, but, rather, may comprise any type of wireless device.
• These wireless devices 102-1 and 102-2 may include digital computers, computer peripherals such as printers, scanners, mice, keyboards, etc., personal data assistants (PDAs), wireless telephones, wireless headsets, and other wireless devices.
• PDAs personal data assistants
• FIG. 2 illustrates a network 20 that includes a plurality of wireless devices 102-1, 102-2... 102-i ... 102-n (2 ⁇ i ⁇ n).
• Wireless network 20 is, for example, a point-to-multipoint Bluetooth piconet where wireless device 102-1 is a master Bluetooth system and wireless devices 102-2 through 102-n are slave Bluetooth systems and communicate with the master Bluetooth system 102-1 over the same channel.
• wireless device 102-1 is a master Bluetooth system
• wireless devices 102-2 through 102-n are slave Bluetooth systems and communicate with the master Bluetooth system 102-1 over the same channel.
• up to seven slaves can be active in the piconet 102.
• the number of active slaves supported in a piconet depends on many variables and design considerations.
• the point-to-point network of Figure 2 need not include Bluetooth devices 102-1, 102-2, but, rather, may comprise any type of wireless device.
• a point-to-multipoint piconet 20 may include many additional slaves that can remain locked to the master 102-1 in a so-called "parked" state.
• parked slaves cannot be active on the piconet channel, but still remain synchronized to the master.
• the master 102-1 controls channel access. To this end, the master 102-1 switches control from one slave to another as it controls channel access within the piconet 20.
• the master 102-1 identifies each slave through a unique network address assigned to each slave. When a transfer of information between two slaves in a piconet 10 is desired, the master 102-1 coordinates point-to-point transmission between the two slaves.
• slave 102-2 could be a wireless personal digital assistant ("PDA") device equipped with a Bluetooth system and slave 102-i could be a wireless cellular telephone equipped with a Bluetooth system.
• PDA personal digital assistant
• the master 102-1 can coordinate communications between two slaves 102-2, 102-i over the piconet channel to exchange, for instance, phone number information. To do so, the master 102-1 switches focus between the first slave 102-2, commanding it to transmit phone number data to the master 102-1, and the second slave 102-i, commanding it to receive phone number data from the master 102-1. This switch in focus is performed by the master through its storing and accessing context information regarding each slave in a relatively rapid succession.
• FIG 3 illustrates, for instance, a "scattemet", formed from multiple piconets with overlapping coverage.
• Bluetooth piconets 20, 31, 33, and 37 form part of the larger Bluetooth scatternet 30.
• Each piconet 20, 31, 33, and 37 has only a single master 102-1, 36, 36, and 34 respectively.
• Figure 3 also illustrates that slaves can participate in multiple piconets on a time-division multiplex basis.
• slave 32 participates in two piconets: piconet 20 having master 102-1 and piconet 31 having master 36.
• a master 34 in one piconet 33 can be a slave in another piconet 37.
• a single Bluetooth system may serve as a master in two piconets, e.g., Bluetooth system 36 serves as a master in both piconet 31 and piconet 37.
• FIG. 4 is a system diagram illustrating a scatternet in which one operation according to the present invention is performed.
• the scatternet of Figure 4 includes four separate piconets 402, 404, 406, and 408.
• Piconet 402 includes master (computer) 410, slave 412 (PDA), and slave 414 (printer).
• Piconet 404 includes master 420 (computer), slave 422 (PDA), and slave 423 (wireless phone).
• Piconet 406 includes master (computer) 416, slave 418 (PDA), and slave 414 (printer).
• Piconet 408 includes master (computer) 424, slave 426 (PDA), and slave 428 (wireless phone).
• the four separate piconets 402, 404, 406, and 408 have overlapping coverage areas.
• All masters are shown to be computers because they will typically be stationary and have the processing capability to service a number of slaves. However, in other embodiments, the masters could be other devices as well.
• the scatternet of Figure 4 may service a call center, customer service department, or other office environment, for example that benefits by the wireless interconnection of the illustrated devices.
• a user of wireless headset 430 desires to have the wireless headset 430 join piconet 402 (corresponding to his home computer).
• the wireless headset 430 has a minimal user interface, e.g., a single authenticate button that initiates joining of a piconet.
• the wireless headset 430 in its operating location, resides within the service coverage area of each of the four separate piconets 402, 404, 406, and 408 that form the scatternet. According to prior techniques, the user of the wireless headset 430 would have difficultly in selecting the desired piconet 402 because of the minimal user interface components of the wireless headset 430.
• the wireless headset 430 when the wireless headset 430 enters (or powers up in) an area with more than one functioning piconet, the wireless headset 430 uses physical proximity, an authenticate button and a power down procedure to start the authentication process.
• the user of the wireless headset 430 physically approaches within close proximity, e.g., less than one meter, the master 410 servicing the piconet 402 that he wishes to join. Then, the user presses the authenticate button, signaling his intention to join the particular piconet 402.
• both nodes, the master 410 and the slave 430 power down to a level that is usable within the one meter close proximity range.
• power down mode will work only if the distance between the devices is less than 1 meter.
• Power down mode increases the security of the authentication process, by minimizing message traffic, which could be received by other devices and other piconets.
• Power down mode increases the security of the authentication process, by preventing most other devices in the area from snooping or eavesdropping on the authentication process. Further, power down mode minimizes or eliminates any confusion regarding which piconet that the user wishes to join.
• the user on the piconet 402 that is within close proximity will get a message on the display of the master 410.
• the message would typically display the PIN of the guest 430 trying to join the piconet 402 along with a message stating his request to join.
• the user on the piconet 402 would then either allow or disallow the guest 430 attempting to join the piconet 420.
• Authentication granted by the process could be temporary or permanent. When authentication is complete, then a confirming message can be sent to both devices. The wireless headset 430 user could receive a confirming tone to indicate completion of authentication. If authentication is not successful, that could also generate a message to one or both of the devices 410 and 430. Once authentication is complete, then normal power mode can be resumed and the guest (wireless headset 430) is now part of that piconet 402 and normal communications continue.
• FIG. 5 is a logic diagram illustrating operation according to the present invention.
• the logical operations described with reference to Figure 5 will include references to the devices of Figure 4 .
• Operation commences when a guest (wireless handset 430) is placed within close proximity of a master (computer 410), e.g., 1 meter (step 502).
• a guest wireless handset 430
• a master computer 410
• a user of the guest 430 presses an authenticate button to initiate the joining of a piconet 402 serviced by the master 410 (step 504).
• the master 410 and the guest 430 then enter a power down mode in which the transmit power of each device is reduced (step 506).
• the transmit power during the power down mode is such that devices outside of the proximate distance between the devices 410 and 430 cannot eaves drop upon the authentication operations unless they are also proximately located. Thus, during the power down mode operations, the guest 430 should not be proximately located to other master devices.
• Authentication operations are then performed in the power down mode (step 508). If the authentication operations are successful (as determined at step 510), normal power operations are resumed (step 512) and wireless communication operations are serviced until completion (step 514) at which point operation ends. If the authentication operations are not successful (as determined at step 510), operations end. After a successful authentication operation, confirmation of such success may be communicated to the user of the guest 430, e.g., the delivery of a distinctive tone to the user of the wireless headset 430.
• FIG 6 is a block diagram generally illustrating the structure of a wireless device constructed according to the present invention.
• the general structure of the wireless device 600 will be present in any of the wireless devices illustrated in Figures 1-4 , either master devices or slave devices.
• the wireless device 600 of Figure 6 implements the operations of Figure 5 .
• the wireless device 600 includes a plurality of host device components 602 that service all requirements of the wireless device 600 except for the wireless requirements of the wireless device 600. Of course, operations relating to the wireless communications of the wireless device 600 will be partially performed by the host device components 602.
• the RF interface 604 services the wireless communications of the host device 600 and includes an RF transmitter 606 and an RF receiver 608.
• the RF transmitter 606 and the RF receiver 608 both couple to an antenna 610.
• the teachings of the present invention are embodied within the RF transmitter 606 of the RF interface 604 and are generally referred to as reduced power authentication operations. During these operations, the transmit power of the RF transmitter 606 is reduced to effectively reduce the operating range of the RF interface 604. During these reduced power operations, the operations of the RF receiver 608 may remain unchanged.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Mobile Radio Communication Systems (AREA)
• Small-Scale Networks (AREA)

Abstract

Description

Claims (6)

Applications Claiming Priority (3)

Publications (2)

Family

ID=23008506

Family Applications (1)

Country Status (4)

Cited By (1)

Families Citing this family (108)

Family Cites Families (3)

• 2002
  • 2002-01-30 EP EP02702107A patent/EP1364494B1/en not_active Expired - Lifetime
  • 2002-01-30 US US10/060,975 patent/US6928295B2/en not_active Expired - Lifetime
  • 2002-01-30 DE DE60234573T patent/DE60234573D1/en not_active Expired - Lifetime
  • 2002-01-30 WO PCT/US2002/002657 patent/WO2002062024A2/en active Application Filing
• 2005
  • 2005-07-05 US US11/174,983 patent/US7734306B2/en not_active Expired - Fee Related
• 2010
  • 2010-05-10 US US12/776,660 patent/US7991423B2/en not_active Expired - Fee Related

Also Published As

Similar Documents

Legal Events